Commit Graph

70 Commits

Author SHA1 Message Date
Jure 62667bc8ef Bump to v0.12.17 — infinite scroll & virtualized feed 2026-05-17 21:10:29 +02:00
Jure db81de9007 Bump to v0.12.16 — security hardening: http(s) scheme guard on link sinks, loop-stable HTML tag strip 2026-05-16 13:59:10 +02:00
Jure 61c6703513 Bump to v0.12.15 — install-aware update banner (Arch/deb/rpm get manual update guidance) 2026-05-16 13:43:38 +02:00
Jure 3757368990 Bump to v0.12.14 — fix macOS auto-updater (add app bundle target) 2026-05-16 13:26:57 +02:00
Jure 0d4153e6de Bump to v0.12.13 — union legacy + cloud on first podcast hydrate 2026-05-15 20:50:47 +02:00
Jure 1cbd13031d Bump to v0.12.12 — podcast subscriptions sync via Nostr (kind 30003) 2026-05-15 20:35:36 +02:00
Jure 7e998be45b Bump to v0.12.11 — read-only mode write-action guards
The app now behaves coherently for users without a signer (fully logged
out, or signed in with an npub). No broken Publish buttons, no dead-end
"Not logged in" toasts.

- Add useCanSign() hook in src/stores/user.ts as the single source of
  truth for write-capability. Captures both "no pubkey" and
  "npub-only login" states.
- ReadOnlyBanner now fires for both states (was only "no pubkey" before).
- Hide account-bound sidebar entries (Bookmarks, Messages, Notifications,
  Zaps, V4V) in read-only mode. Read-only-OK views (Feed, Articles, Media,
  Podcasts, Search, Follows, Relays, Settings, Support) stay visible.
- Guard every write surface, two patterns:
  - Hide inline UI: ComposeBox, InlineReplyBox, NoteActions row, NoteCard
    context menu, ArticleFeed "Write article", FollowsView per-row
    follow/unfollow, ThreadView root reply, PollWidget vote controls,
    RelaysView "Publish list", PodcastPlayerBar ShareButton.
  - "Sign in to X" CTA: ArticleEditor publish, QuoteModal post, ZapModal,
    EditProfileForm save. CTAs open LoginModal.
- ProfileView edit/follow/mute/zap/DM buttons each gated by canSign.
- ArticleView like/repost/comment/bookmark/zap each gated by canSign.
- Belt-and-suspenders runtime guards in user store follow/unfollow.

Bookmark / mute stores already swallow publish errors via .catch(() => {}),
so they don't need explicit runtime guards.
2026-05-11 22:08:06 +02:00
Jure 9fc585a395 Bump to v0.12.10 — security: Tauri, rustls-webpki, rand, dompurify, postcss
Clears all Dependabot alerts except glib (pinned upstream by Tauri's gtk-rs
stack via wry — waits for upstream).

- Tauri 2.10.3 → 2.11.1 (Origin Confusion IPC fix, + wry/tao/tray-icon bumps)
- rustls-webpki 0.103.10 → 0.103.13 (high-severity DoS panic on malformed CRL)
- rand 0.8.5 → 0.8.6, rand 0.9.2 → 0.9.4 (soundness with custom loggers)
- dompurify 3.3.2 → 3.4.2 (four sanitization bypasses)
- postcss 8.5.8 → 8.5.14 (XSS via unescaped </style>)

No functional changes. Smoke tested on Linux: build clean, app starts, feed
renders, podcast playback works, login flow works.
2026-05-11 15:20:01 +02:00
Jure 58f3b4d7cb Bump to v0.12.9 — Web of Trust everywhere
Extends the WoT filter beyond the global feed: reaction pills, zap
totals, and all feed tabs (global, following, trending) now respect
the trust graph. Also drops the "new account" badge, since the
kind-0 created_at proxy was unreliable.

Softens the v0.12.8 forward-reference to Blossom — it will reappear
in a future release, not specifically this one, since it still needs
a safe-probe or allowlist (see WEBKIT_OOM_INVESTIGATION).
2026-04-23 19:34:16 +02:00
Jure bc4c72d6a0 Fix Linux OOM: disable Blossom SHA-256 URL auto-detection
Commit 214c42b (v0.12.6) added auto-detection of content-addressed
Blossom URLs (64-hex SHA-256 paths) as <img> elements. Blossom is
widespread in modern Nostr feeds — every feed page started rendering
3-5x more <img> elements. Combined with WebKitGTK's weak decoded-
bitmap eviction, feed scrolling grew the WebKit web process to
8-12 GB and triggered WebKit's self-kill threshold with:

  Unable to shrink memory footprint of process (9022 MB) below
  the kill threshold (8192 MB). Killed

Disable BLOSSOM_URL_REGEX in parseContent(). Real Blossom images
shared via standard upload flows (with proper extensions) still
render. Proper reintroduction (HEAD request + Content-Type
validation, or known-server whitelist) planned for v0.12.9.

Also restore feed depth caps to pre-crisis values now that memory
is under control:
  - MAX_FEED_SIZE 30 → 200 (v0.12.6 baseline)
  - fetchFollowFeed limit 30 → 100
  - fetchGlobalFeed fetch 80 → 100
  - Following tab slice 30 → 100

The earlier 30-caps were themselves OOM firefighting that shipped
in v0.12.7 and were no longer needed.

Memory verified 2026-04-16: oscillates 1.1-1.6 GB across all tabs
(Global / Following / Trending / Media / profile / thread) under
heavy use with embedded relay enabled. No crashes. Elastic cache
behaviour rather than monotonic leak — memory spikes briefly on
content loads and reclaims within seconds.

See private_docs/WEBKIT_OOM_INVESTIGATION.md for the full
investigation (4 days of chasing symptoms before finding the
one-line regex as the real cause).
2026-04-16 21:31:04 +02:00
Jure 8b5fdc0720 Bump to v0.12.8 — fix Linux OOM crash 2026-04-16 11:44:19 +02:00
Jure f3b92004f0 Bump to v0.12.7 — fix NIP-96 upload endpoints, block SVG uploads 2026-04-13 14:43:03 +02:00
Jure 37e87825d4 Bump to v0.12.6 — DM polish, multi-image upload fix, Blossom image rendering 2026-04-10 20:10:20 +02:00
Jure 2b2a5929f7 Bump to v0.12.5 — UI polish, V4V fix, production-silent logging 2026-04-09 19:57:57 +02:00
Jure acd5a5979b Bump to v0.12.4 — polls, custom relay, UI polish
NIP-1068 polls: create and vote on polls inline in the feed.
Switch default relay to custom Go relay (relay2.veganostr.com).
Note action icons with tooltips, sidebar icon cleanup,
search dedup fix, thread indentation fix.
2026-04-06 18:15:48 +02:00
Jure 262b2d36d5 Bump to v0.12.3 — fix direct messages
NIP-17 gift-wrapped DMs were silently dropped by NDK's fetchEvents.
Switched to subscribe-based fetch that correctly receives kind 1059.
2026-04-06 12:49:40 +02:00
Jure 2083e08baa Bump to v0.12.2 — Vega public relay as default 2026-04-05 13:45:57 +02:00
Jure 5d78aac091 Bump to v0.12.1 — Media feed, Trending retry, read-only banner 2026-04-04 21:09:41 +02:00
Jure 63f2803953 Bump to v0.12.0 — Podcasts & Value 4 Value 2026-04-04 20:27:48 +02:00
Jure 9477b6d68e Bump to v0.11.0 — embedded relay, naddr links, new themes 2026-04-02 15:28:35 +02:00
Jure f2d51fba31 Bump to v0.10.1 — search resilience, nostr: URI prefix support 2026-03-31 06:35:25 +02:00
Jure 6a7a0bccf3 Bump to v0.10.0 — paste nevent/naddr in search, copy npub from profiles 2026-03-30 21:48:30 +02:00
Jure d5eeb2d819 Update AUR package name to vega-nostr-git (vega-git was taken) 2026-03-30 21:27:50 +02:00
Jure 5cbaa7b741 Rename Wrystr to Vega
Named after Jurij Vega (1754-1802), Slovenian mathematician who made
knowledge accessible through his logarithm tables. Rebrand before
OpenSats application (April 1).

- Product name, window title, identifiers, binary name all renamed
- Cargo package: wrystr -> vega, wrystr_lib -> vega_lib
- PKGBUILD: wrystr -> vega (new AUR package name)
- Release workflow: artifact names, release text updated
- README: new tagline referencing Jurij Vega
- DB migration: auto-renames wrystr.db -> vega.db on first launch
- Keyring service name kept as "wrystr" for backward compatibility
- localStorage keys kept as wrystr_* to preserve existing user data

Pending manual steps:
- Rename GitHub repo hoornet/wrystr -> hoornet/vega
- Create new AUR package vega-git, orphan wrystr-git
- Update local .desktop launcher
2026-03-30 21:14:02 +02:00
Jure 1d86023779 Bump to v0.9.11 — notification cleanup, bookmark fixes
Follower notifications moved to Follows-only, deduped by pubkey.
Article bookmarks now appear under Articles tab. Updated docs.
2026-03-30 08:32:28 +02:00
Jure 56584d9b08 Bump to v0.9.10 — instant everything via SQLite caching
Followers, bookmarks, articles feed, and own profile all load
instantly from SQLite cache. Relay data merges in background.
2026-03-29 20:49:54 +02:00
Jure e86561379b Bump to v0.9.9 — instant threads, Linux upload fix, trending fix 2026-03-29 18:38:02 +02:00
Jure c5ddd88cbd Bump to v0.9.8 — Web of Trust, instant notifications, profile retry 2026-03-29 16:28:33 +02:00
Jure 8bc38c11e6 Bump to v0.9.7 — emoji reactions, npub search, notification fix 2026-03-27 18:25:57 +01:00
Jure bb084182d7 Bump to v0.9.6 — content-only zoom, font size fix 2026-03-25 16:35:22 +01:00
Jure 0ee9476825 Bump to v0.9.5 — large font overflow fix for Windows 2026-03-25 15:35:12 +01:00
Jure f460a53875 Bump to v0.9.4 — search, follows, editor, polish
Search overhaul with dedicated NIP-50 relays, follows view, article
editor image previews, auto-expanding textareas, profile layout fix,
thread stability fix.
2026-03-25 12:03:05 +01:00
Jure ad028c7406 Bump to v0.9.3 — color themes, font size, settings polish
7 color themes (Midnight, Light, Catppuccin Mocha, Tokyo Night, Gruvbox,
Ethereal, Hackerman), font size presets (Small/Normal/Large/Extra Large),
collapsible muted accounts list, removed old sidebar connection indicator.
2026-03-24 12:16:08 +01:00
Jure 97fd6c55bf Bump to v0.9.2 — relay status, toasts, debug panel, relay UX 2026-03-23 19:18:10 +01:00
Jure c9a92b9b47 Bump to v0.9.1 — live feed, relay reliability, timeout fixes 2026-03-22 11:42:05 +01:00
Jure 9fbc71ac8c Bump to v0.9.0 — thread conversation overhaul, nested trees, multi-level nav 2026-03-21 16:00:10 +01:00
Jure 1dafb3b456 Bump to v0.8.4 — codebase refactor, docs update, bug fixes
Last stabilization release before the podcast playback sprint.

- Add Supported NIPs table to README (20 NIPs documented)
- Update README features with everything since v0.8.0: NIP-46,
  media feed, trending, emoji picker, keyword muting, hashtag
  pages, profile media gallery, relay recommendations, data export,
  reading list tracking, syntax highlighting, OS notifications
- Update ROADMAP: NIP-46 marked shipped, v0.8.x entries added,
  podcast playback listed as next milestone
- Update CLAUDE.md architecture to reflect refactored file structure
- Update release notes in CI workflow
- Version bump in all 4 files
2026-03-20 17:58:01 +01:00
Jure 0bcbba6e8f Bump to v0.8.3 — trending feed, NIP-46 remote signer, media feed, profile media gallery 2026-03-20 12:45:58 +01:00
Jure afb8fed97b Bump to v0.8.2 — writing & reading polish, article TOC
- Remove 280-char note limit, soft warning at 4000
- Serif reading font (Georgia) at 17px for articles
- Reading progress bar on articles
- Article table of contents (floating right, scroll-aware)
- Connection indicator fix (data-aware, 25s grace)
2026-03-20 11:00:46 +01:00
Jure 7411cbf981 Fix release notes: recommend AUR for Arch/Manjaro install 2026-03-19 19:56:49 +01:00
Jure d993ae1131 Bump to v0.8.0 — polish, portability, discovery
Profile banner polish (hero height, click-to-lightbox, avatar overlap),
data export (bookmarks/follows/relays as JSON), relay recommendations
(discover from follows' NIP-65 lists), reading list tracking (read/unread
on bookmarked articles with sidebar badge), trending hashtags (clickable
pills on search idle screen). Updated CLAUDE.md and release notes.
2026-03-19 19:54:14 +01:00
Jure d257075023 Bump to v0.7.1 — relay health checker, advanced search 2026-03-19 19:23:39 +01:00
Jure 092553ab9b Bump to v0.7.0 — writer tools, NIP-98 uploads, multi-draft, article bookmarks
- NIP-98 HTTP Auth for image uploads with fallback services (void.cat, nostrimg.com)
- Markdown toolbar (bold, italic, heading, link, image, quote, code, list) + Ctrl+B/I/K
- Multi-draft management with draft list, resume, delete, auto-migrate
- Cover image file picker in article meta panel
- Article bookmarks via NIP-51 'a' tags; Notes/Articles tabs in BookmarkView
- Removed Rust upload_file command; dropped reqwest/mime_guess deps
- Upload spinner, draft count badge, empty states
2026-03-18 18:36:08 +01:00
Jure c66885440a Fix CI: top-level permissions, bump checkout@v6 + setup-node@v5 2026-03-18 15:02:48 +01:00
Jure fbf05e8f90 Bump to v0.6.1 — native file upload, mention names, connection stability
- Native file picker (+) in compose box uploads via Rust backend (reqwest)
- Pasting a local file path auto-uploads instead of inserting text
- @mentions resolve to profile display names via useProfile hook
- Connection indicator uses 15s grace period before showing offline
- Upload uses correct nostr.build v2 API; Rust-side multipart for native picks
- Content parser extracted to src/lib/parsing.ts
2026-03-18 14:55:29 +01:00
Jure ef189932e6 Bump to v0.6.0 — article discovery, search, profile tab, reader polish
Article discovery feed with Latest/Following tabs, article search
(NIP-50 + hashtag for kind 30023), Notes/Articles tab on profiles,
reading time + bookmark + like buttons on article reader. Event
passed directly from card to reader to avoid relay re-fetch failures.
2026-03-17 21:47:24 +01:00
Jure 8ce1d43d2d Bump to v0.5.0 — note sharing, reply counts 2026-03-15 21:49:52 +01:00
Jure 35fac6bab9 Bump to v0.4.1 — media players, YouTube/Spotify cards, feed fix
Add inline video/audio players for direct media URLs, rich link cards
for YouTube (with thumbnails), Vimeo, Spotify, and Tidal. Fix video
clicks navigating to thread by splitting NoteContent into inline/media
modes. Fix published notes not appearing on Following tab.
2026-03-15 12:32:00 +01:00
Jure c8d2b05440 Bump to v0.4.0 — Phase 3: image lightbox, bookmarks, discover, language filter, UI polish 2026-03-14 18:00:28 +01:00
Jure af8a364e28 Bump to v0.3.1 — Phase 2 complete, AUR package, feed tab fix 2026-03-14 16:31:18 +01:00